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A METHOD AND PROGRAM FOR MONITORING 
EXECUTION STATE OF PROGRAM 



BACKGROUND OF THE INVENTION 

The present invention relates to a technique 
for monitoring execution state of a program executed on 
a computer. 

5 JP-A-2001-325126 discloses a method for 

monitoring a computer system having a computer or the 
like by collecting values of items associated with the 
execution state of a program executed on the computer 
at a predetermined time interval, wherein according to 
10 the use frequency or load of the computer, the computer 
monitoring interval is reduced or the number of items 
(monitoring items) to be monitored is added or 
alternatively, the computer monitoring interval is 
increased or the monitoring item is deleted. 



15 SUMMARY OF THE INVENTION 

When monitoring the execution state of a 
program executed on a computer and use state of the 
hardware resources of the computer, it is preferable to 
collect values of items associated with the execution 

20 state of the program to be monitored at a short time 
interval so as to obtain detail information on the 
object to be monitored. On the other hand, in order to 
obtain values of items associated with the program 
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execution state, it is necessary to execute a monitor- 
ing program on the computer and collection of items to 
be monitored at a short time interval increases the 
load on the computer- It is necessary to collect 
5 detail information on the object to be monitored while 
suppressing the load on the computer. This is not 
described in the prior art. 

It is therefore an object of the present 
invention to provide a technique for obtaining detail 

10 information on an object to be monitored while 

controlling the collection time interval of each item 
so as to suppress the computer load. 

In order to achieve the aforementioned 
object, the present invention suggests the following 

15 means. That is, when a collection time interval of a 
certain item is decreased, the collection time 
intervals of the other items are increased- Moreover, 
when the load on a computer has become high, a collec- 
tion time interval of a certain item is increased. 

20 Simultaneously with this, there is provided an upper 
limit for the number of items whose collection time 
interval can be decreased. Moreover, when a time 
interval of an item is varied according to the item 
value, the interval varying range is varied according 

25 to the item state and the computer load. 

Other objects, features and advantages of the 
invention will become apparent from the following 
description of the embodiments of the invention taken 
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in conjunction with the accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 shows configuration of computers 

connected in such a manner that they can communicate 
5 with one another according to an embodiment of the 

present invention- 
Fig. 2 shows a table associated with the 

collection time interval. 

Fig. 3 shows a table associated with item 

10 states. 

Fig. 4 shows a table associated with the 
computer load. 

Fig. 5 shows a table associated with 
derivative group. 
15 Fig. 6 shows a table associated with abnormal 

items . 

Fig. 7 is a flowchart showing operation of a 

monitoring item acquisition program- 
Fig. 8 is a flowchart showing a first 
20 operation of a collection time interval management 

program. 

Fig. 9 is a flowchart showing a second 
operation of a collection time interval management 
program. 

25 Fig. 10 is a flowchart showing a third 

operation of a collection time interval management 
program- 
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Fig. 11 is a flowchart showing a fourth 
of a collection time interval management 

Fig. 12 is a flowchart showing a first 
of a collection time interval modification 

Fig. 13 is a flowchart showing a second 
of a collection time interval modification 

Fig. 14 is a flowchart showing a third 
of a collection time interval modification 

Fig. 15 is a flowchart showing operation of a 
computer load monitoring program. 
15 Fig. 16 is a flowchart showing operation of a 

monitoring item acquisition program. 

Fig. 17 is a flowchart showing operation of a 
collection time interval modification program. 

Fig. 18 is flowchart showing operation of an 
20 item value acquisition program. 

Fig. 19 is a flowchart showing operation of a 
collection time interval management program. 

Fig. 20 is table having information on detail 
collection time of each derivative group. 
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DESCRIPTION OF THE EMBODIMENTS 

Description will now be directed to 
embodiments of the present invention with reference to 
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the attached drawings . 

Fig, 1 shows configuration of a system 
including computers connected in such a manner that 
they can communicate with one another according to an 
5 embodiment of the present invention. In Fig. 1, a 
plurality of computers (100, 130, 140) are connected 
via a network. 

Here, explanation will be given on the 
configuration of the computer 1 (100) as an example of 

10 the computers used in this embodiment. The computer 

100 includes a storage unit 110 containing programs and 
data and a processing unit 120 such as a CPU for 
executing the programs stored in the storage unit. The 
storage unit 110 contains a program 1110 (such as an 

15 application program and OS) to be monitored, a 

monitoring item acquisition program 1111 for monitoring 
the respective programs, and a collection interval 
modification program 1112 for modifying the collection 
interval as a timing for acquiring the value of the 

20 item by the monitoring item acquisition program. 

Moreover, the storage unit contains an item 
information table 1210 where information on the items 
to be monitored is registered and a collection interval 
table 1220 where information on collection intervals of 

25 the respective items is registered. Moreover, the 
storage unit contains a derivative group definition 
table 1240 where groups each consisting of some items 
are correlated and registered. 
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A group consisting of at least one item is a 
derivative group of one item. This means in the 
derivative group definition table 1240, that the group 
is registered with linking to the item. Each 
5 derivative group may consist of items associated with 
the same one program or associated with more than one 
different programs. Moreover, each derivative group 
may consist of items associated with a program which is 
executed on more than one different computers. It 

10 should be noted that in the derivative group definition 
table 1240, names indicating the respective derivative 
groups are registered in a field 520 in Fig. 5. 

In the embodiment explained below, when a 
value of a certain item is judged to be abnormal, the 

15 interval of items belonging to the derivative group of 
this item is reduced. When a value of an item (ai) is 
judged to be abnormal and the collection interval al of 
the derivative group ({Pl, P2 Pn}) defined for the 

ai is reduced^ the item ai will be called an abnormal 

20 item for each item belonging to the derivative group. 
That is, if the item a is an abnormal item of the item 
p, the item p belongs to the derivative group of a and 
when the value of the item a becomes abnormal, the 
interval of each item belonging to the derivative group 

25 to which the item p belongs is reduced. 

An abnormal item table 1250 is a table in 
which items belonging to a derivative group and their 
abnormal items are correlated and the abnormal items 
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for the respective items are modified as needed by a 
collection interval management program 1260 or the 
like. Furthermore, the collection interval management 
program 1260 is stored. The program operates as 
5 follows. When the value of a certain item has become 
abnormal, the derivative group of the item is extracted 
from the derivative group definition table 1240 and 
notification to reduce the interval of each item 
extracted is issued to a collection interval modifica- 

10 tion program 1112. Furthermore, a computer load 

monitoring program 1270 for collecting values of items 
associated with a computer load such as the CPU use 
ratio and disc capacity and a computer load information 
table 1280 having information on the state of items 

15 related on the computer load are stored. 

The computer 2 (130) and the computer 3 (140) 
have the same configuration as the computer 1 (100) . 
In the embodiment below, explanation is given on a 
system including three computers. However, the present 

20 invention is not limited to this configuration- That 
is, the system may include only one computer or more 
than one computers connected in such a manner that they 
are communicate with one another. Moreover, when 
monitoring a system including more than one computers, 

25 each computer may not have the collection interval 

management program. That is, only one. computer among 
the computers constituting the system can have the 
collection interval management program 1260. Moreover, 



it is also possible to execute the collection interval 
management program 12 60 in the computer where no 
program to be monitored is executed. 

Hereinafter, explanation will be given on 
details of the respective tables and the operation of 
the programs. Fig. 2 shows the collection interval 
table 1220. This table has information on the 
collection interval which is an interval for collecting 
values of items by the monitoring item acquisition 
program 1111 for each item. For an item name 200^ item 
names to be monitored are registered. As an item, for 
example, there is an access frequency 201 of an 
application program (referred to as the API) indicating 
the frequency of the access to the database management 
system by the API. Moreover, the item associated with 
computer load (such as CPU use state, memory use state) 
can also be registered as a monitoring object item. 
The items to be monitored are set by a user. 

The collection interval 210 is an interval 
for collecting a value of each item. For example. Fig. 
2 shows that the value of the item which is the API 
access frequency is collected every 30 seconds. These 
intervals are set in advance by a user before starting 
collection of the items and modified as needed 
according to the state of the item to be monitored, by 
the collection interval modification program 1112. In 
the embodiment below, the value set as the collection 
interval 210 of each item in advance by the user will 
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be referred to as an "initial value", 

Moreover, in the initial value 220 of Fig. 2^ 
it is assumed that a value identical to the value set 
by the user as the initial value of the collection 
5 interval 210 is registered. When modifying the 

interval of each item, the possible maximum value and 
the possible minimum value of the interval are set by 
the user as the maximum value 2 60 and the minimum value 
250. 

10 In the collection state 230, one of the 

states "normal state", "degeneration state", "detail 
state" and "temporary stop state" is registered for 
each item. These are used when modifying the 
collection interval 210 and are modified as needed 

15 according to the item state and the collection interval 
210 by the collection interval modification program 
1112. When the collection state of an item is "normal 
state", the interval 210 of the item is equal to the 
initial value 220 set for this item. Moreover,, when 

20 the collection state of an item is the "detail state", 
the interval 210 is smaller than the initial value 220. 
The "degeneration state" means that the interval 210 is 
greater than the initial state 220. Moreover, the 
"temporary stop state" means a state that the collec- 

25 tion interval 210 is not modified by the collection 
interval modification program 1112. A fluctuation 
reference value 240 is a value serving as a reference 
to reduce or increase the interval when modifying the 



interval of an item according to the fluctuation ratio 
of the item. The fluctuation reference value 240 is 
set by a user. 

Fig. 3 shows an example of the item 
information table 1210. This is used when modifying 
the collection interval and consists of conditions for 
modifying or not modifying the collection interval of 
each item. In the item name, like in Fig. 2, the item 
name to be monitored is registered by the user in 
advance. "In a "normal state definition" (310), a 
condition for the value of each item is registered . 
The item state is "normal" if the value of each item 
satisfies the condition. For example, in the item of 
access frequency 301 of the API, 20/s or below (311), 
i.e., the state that access request made for one second 
is 20 times or below is registered as a normal state. 
In the normal state definition 310, each item is set by 
the user. 

In the item state 320, a normal state or an 
abnormal state is set. If the value of the item 
collected satisfies the condition of the normal state 
registered for this item, "normal" is registered. 
Otherwise, "abnormal" is registered. The item state 
320 is modified as needed according to the state of 
each item by the collection interval modification 
program 1112 or the like. A previous acquisition item 
value 330 is the latest value in the items collected 
previously for each item and is updated as needed by 
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the monitoring item acquisition program 1111. 

Fig. 4 is a computer load information table 
1280 where the state of the item 400 associated with 
the computer load is registered. The item registered 
5 here is monitored by the computer load monitoring 
program 1270. This table used according to the 
computer load when modifying the collection interval of 
the item to be monitored and registered in Fig. 2. In 
Fig. 4, in the item name 400, items associated with the 

10 computer load are registered. The items registered in 
the item name 400 may be partially or entirely overlap 
with the items associated with the computer load among 
the items registered in the item information table of 
Fig. 2. A normal state definition 410, like in Fig. 3, 

15 contains the condition of the value of each item. The 
"normal" state is set if the condition is satisfied. 
An item state, like in Fig. 3, indicates whether 
currently normal or abnormal. Moreover, the interval, 
for collecting the value of each item is registered in 

20 the collection interval 430. A previous acquisition 
item value 440 is the latest value among the values 
collected prior to the presence. 

Fig. 5 is a derivative group definition table 
1240- Here, a group (derivative group) 510 consisting 

25 of at least one item is related to each item 500 and 

registered. The derivative group for each item is set 
together with the group name 520 by the user. It 
should be noted that the derivative group defined for 
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each item may be an item associated with only one 
program executed on the same computer as each item or 
an item associated with more than one programs executed 
on the same computer. Moreover, it may consist of an 
5 item associated with a program executed on more than 
one different computers. When there is a derivative 
group consisting of an item associated with a program 
executed on different computers, it is possible to 
register in the derivative group definition table 1240 

10 information indicating on which computer a program 

associated with the item belonging to each derivative 
group is executed. 

Fig. 6 is an abnormal item table 1250. In a 
derivative item 600, items registered in the derivative 

15 group 510 of Fig. 5 are registered. This is set in 

advance by the user. In an abnormal item 610, abnormal 
items of the respective derivative items are 
registered. For example, the access frequency 601 of 
AP2 is an item belonging to a derivative group of item: 

20 API wait time (611) . Since the API wait time (611) is 
in the abnormal state and the collection interval is 
reduced, as the abnormal item of the access frequency 
of AP2, the API wait time is registered. The abnormal 
items of the respective derivative items are updated as 

25 needed according to the item state by the collection 
interval management program 1260. 

Fig. 7 is a flowchart showing operation of 
the monitoring item acquisition program 1111 according 
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to the embodiment of the present invention. The 
monitoring item acquisition program selects one (al) of 
the items registered in the item name 200 of the 
collection interval table 1220 (Fig. 2). As a method 
5 for selecting the item, for example, the items 

registered in the item name 200 may be successively 
selected from the top but the method is not limited to 
this. In step 700, it is judged whether a predeter- 
mined collection interval of the item has elapsed after 

10 the value of the item for the item al has been acquired 
previously. - If the time has elapsed, the value of the 
item al is acquired (701) . Next, it is judged whether 
the value of the acquired item satisfies the "normal" 
condition decided for the item by referencing the 

15 normal state definition 310 of the item information 
table 1210 (Fig. 3) (702) . If the result is 
"abnormal", it is judged whether the collection state 
is "detail" by referencing the collection state 230 of 
the collection interval table 1220 (Fig. 2) for the 

20 item al . 

If the collection state is other than the 
"detail", it is judged whether the collection state of 
the item al is "temporary stop" (705) . As will be 
detail later, when the computer load has become large, 
25 reduction of the collection interval of the monitoring 
object item is temporarily stopped so as to prevent 
further increase of the load. Accordingly, when 
deciding whether to reduce the collection interval, it 
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is necessary to judge whether the collection state is 
"temporary stop". If the collection state is judged to 
be other than the "temporary stop", notification 1 is 
issued to the collection interval management program 
5 1260 (707). The notification 1 is used to reduce the 
collection interval of the item belonging to the 
derivative group of item al . As has been described 
above, the collection interval management program 12 60 
to which the notification is issued may be the same 

10 computer as the computer where the monitoring item 

acquisition program 1111 which has acquired the value 
is executed or may be a different computer - 

Fig. 8 is a flowchart showing operation of 
the collection interval management program 12 60. The 

15 collection interval management program receives the 
notification 1 (800) and references the collection 
state 230 of the collection interval table 1220 (Fig. 
2) so as to judge whether there is an item in the 
"detail collection" state (801) . If there exists an 

20 item in the "detail collection" state, the processing 
is terminated (806) . This means that there is already 
an item other than al whose collection interval has 
been reduced due to an abnormal state and the 
collection interval of the item al is not reduced. 

25 Thus, it is possible to suppress increase of the 

computer load caused by simultaneous reduction of the 
collection intervals of a plenty of items. 

In step 801, if there is no item in the 
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"detail" state, an item belonging to the group is 
extracted from a group corresponding to the item al of 
the derivative group table (Fig. 5) (802) . For the 
respective items extracted, notification 4 instructing 
5 reduction of the collection interval is issued to each 
collection interval modification program 1112 modifying 
the collection interval of each item (803) . The 
collection interval modification program 1112 to which 
the notification is issued may be executed on the same 
10 computer as the collection interval management program 
1260 or may be executed on a different computer or may 
be executed both on the same computer and the different 
computer . 

Next, items not belonging to the derivative 
15 group associated with the item al are extracted (804) 
and notification 5 instructing to increase the collec- 
tion interval of the respective items extracted is 
issued to the collection interval modification program 
1112 having the function to modify the collection 
20 interval of each item (805) . Thus, the increase of 
computer load by the reduction of the collection 
interval of some items in step 803 can be suppressed by 
increasing the collection interval of the other items. 
Here, the items whose collection interval is increased 
25 is selected from those not belonging to the derivative 
group associated with the item al and accordingly, it 
is possible to collect detail information on the 
derivative group associated with the item al . 
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It should be noted that in step 804, when 
selecting an item whose collection interval is to be 
increased, the number of items to be selected may be 
set appropriately depending on the value of the item 
5 associated with the computer load and the number of 

items belonging to the group whose collection interval 
has been reduced. For example, the more items become 
objects of the instruction of the interval reduction, 
the collection intervals of more items may be 

10 increased- However, the present invention is not 
limited to this method. Moreover, as a method for 
selecting the item whose collection interval is to be 
increased, for example, among the items registered in 
Fig. 2, it is possible to select items not belonging to 

15 the derivative group whose collection interval is to be 
reduced in the order of registration in the table. 
However, the present invention is not limited to this 
method - 

Fig. 12 is a flowchart showing operation of 
20 the collection interval modification program 1112 which 
has received the notification 4. Upon reception of the 
notification 4 (step 1200 in Fig. 12), the current 
interval of the collection interval table 1220 (the 
collection interval 210 of Fig. 2) is referenced and 
25 this value divided by 2 is X which is stored (1201). 
Next, the X is stored as a new collection interval in 
the interval 210 (1202) . Furthermore, "detail" is 
stored in the column 230 of the collection state 
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(1203) , Lastly, in the abnormal item table 1250 of 
Fig. 6, the item al is registered in the column of 
"abnormal item" corresponding to the item whose 
interval has been reduced (1204) and the processing is 
5 terminated (1205) . It should be noted that in step 

1201, an arbitrary positive number may be used instead 
of the numeric 2 used for calculating the new 
collection interval X. 

Fig. 13 is a flowchart showing operation of 

10 the collection interval modification program 1112 which 
has received notification 5. Upon reception of the 
notification 5 (1300), the current collection interval 
multiplied by 2 is made Y which is stored (1301) and 
the y is registered as a new collection interval 

15 (1302) . Next, in step 1303, the collection state of 
the item whose interval has been increased is set to 
"degeneration" (1303) and the processing is terminated 
(1304). Instead of the numeric 2 used in step 1301, it 
is possible to use another positive number. 

20 When the collection state is judged to be 

"detail" in step 704 of Fig. 7, it is judged whether 
the item al itself is registered as an abnormal item of 
the item al in the abnormal item table 1250 (Fig. 6) . 
If the item al itself is registered as an .abnormal 

25 item, notification 2 is issued to the collection 

interval management program (708) . This notification 
means that since the collection interval of the 
derivative group decided for the item al is reduced and 



the item al is in an abnormal state, the collection 
interval of the derivative group decided for the item 
al is to be further reduced, Thus^ it is possible to 
"collect more detail information on the derivative group 
5 decided for the item al . Moreover, in step 706, if the 
item al is not registered as an abnormal item, the 
processing is terminated. This means that since the 
collection interval for the derivative group decided 
for the item al is not reduced and the collection 
10 interval for a derivative group for another item 
containing the item al is already reduced, the 
processing is terminated without modifying the 
collection interval of the derivative group for the 
item al- 
ls The collection interval management program 

1260 which has received the notification 2 operates in 
the same way as the collection interval management 
program which has received the notification 1 which has 
been explained with reference to Fig. 8. 
20 In step 702 of Fig. 7, if the value of the 

acquired item is "normal", the collection interval 
table (Fig. 2) is referenced and it is judged whether 
the collection state of the item al is "detail" (703) . 
If the collection state of the item al is judged to be 
25 "detail", the abnormal item table 1250 (Fig. 6) is 
referenced and it is judged whether the item al has 
derivation (710) . Here, an item having derivation 
means that in the abnormal item table 1250, an item 
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other than that item is registered as an abnormal item 
of that item. If no derivation is present, notifica- 
tion 3 is issued to the collection interval management 
program 1260 (711) . This means that since the item al 
5 is in a normal state and has no derivation, the 

collection interval of the derivative group for the 
item al is recovered to the initial value. 

In step 703, if the collection state of the 
item al is judged to foe other than "detail", the 

10 collection interval table 1220 (Fig. 2) is referenced 
and it is judged whether the collection state of the 
item al is "temporary stop" (709) - If the collection 
state is "temporary stop", it is judged whether deriva- 
tion is present (710) . If there is no derivation, the 

15 notification 3 is issued to the collection interval 

management program 1260 (711) . This also recovers the 
collection interval of the derivative group for the 
item al to the initial value. 

Fig. 9 is a flowchart indicating operation of 

20 the collection interval management program 1260 which 
has received the notification 3. The collection 
interval management program receives the notification 3 
(900) and references the derivative group definition 
table 1240 (Fig. 5) so as to* extract an item belonging 

25 to the derivative group of the item al (901). Next, 
notification 9 is issued to instruct to recover the 
collection intervals of the respective items extracted 
to the initial values (902) . 
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Furthermore, notification 10 is issued to 
instruct to reference the collection interval table 
1220 (Fig. 2) so as to extract items in the 
degeneration state and recover the collection intervals 
5 of the items extracted to the normal intervals (903) 
and the processing is terminated (904) . In step 902, 
the collection intervals of the items whose collection 
intervals have been reduced due to the abnormality of 
the item al are recovered to the initial values. In 

10 step 903, the collection intervals of the items whose 
collection intervals have been increased to suppress 
increase of the computer load due to the reduction of 
the collection interval of the derivative group for the 
item al are recovered to the initial values . 

15 The collection interval modification program 

1112 receives the notification 9 (step 1400 in Fig. 14) 
and registers the value registered as an "initial 
value" of the collection interval table 1220 in the 
column "interval" of the table (1401) . Furthermore, 

20 the collection state (230) is set to "normal" (1402) 

and the processing is terminated (1403) . The operation 
performed when notification 10 is received is identical 
to this- 

Fig. 15 is a flowchart indicating operation ■ 
25 of a computer load monitoring program 1270 according to 
the embodiment of the present invention. The computer 
load monitoring program selects one of the items 
registered on the computer load information table 1280 
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(Fig. 4) , The method for selection may be, for 
example, sequential selection in the order of registra- 
tions in the table but the method is not to be limited 
to this: In step 1500, it is judged whether the 
5 collection interval (field 430 of Fig. 4) registered 
for the item associated with the computer load to be 
monitored has elapsed from the moment when the value 
has been acquired previously (1500) . 

If the collection interval has elapsed, the 
10 value of the item is acquired (1501) and the abnormal 
state definition 410 of the computer load information 
table 1280 is reference to judge whether the value 
acquired is normal (1502) . 

If the value is not normal, notification 11 
15 is issued to the collection interval management program 
1260 (1503) . 

Fig. 10 is a flowchart showing operation of 
the collection interval management program 1260 which 
has received the notification 11. Upon reception of 
20 the notification 11 (1000), the collection state for 

each item whose collection state 230 is "detail" in the 
collection interval table 1220 is modified to 
"temporary stop" (1001) . Next, notification 13 
instructing to increase the collection interval for the 
25 items in the regenerate state or normal state is issued 
to the collection interval modification program 1112 
(1002) and the processing is terminated (1003) . 

The notification 11 is issued because the 
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value of the item concerning the computer load has 
become abnormal. Now, the collection interval for the 
items in the detail collection state may be further 
reduced to further increase the computer load, 
5 According to the present embodiment which is realized 
by the notification 11 and the operation of the 
collection interval management program 1260 which has 
received the notification 11, the collection state of 
items in the detail collection state is modified to the 

10 temporary stop state so as to temporarily stop the 

reduction of the collection interval, thereby prevent- 
ing further increase of the computer load. Here, the 
collection interval of the items which has been 
modified to the temporary stop is maintained to the 

15 value before the modification of the collection state 
and accordingly, it is possible to collect information 
detail as before the modification of the collection 
state. Moreover, when the interval of the item in the 
detail collection state is modified to the temporary 

20 stop state, the collection interval of the item in the 
regenerate state or the normal state is increased, so 
as to reduce the computer load. 

It should be noted that in this invention, as 
the operation of the collection interval management 

25 program 1260 which has received the notification 11 

(Fig. 10), it is possible only to issue a notification 
to increase the collection interval of the item in the 
normal or degeneration state (1002) . 
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In step 1502 of Fig. 15,. if the value of the 
item is judged to be normal, then it is judged whether 
the previously acquired item value 440 of the computer 
load information table 1280 (Fig. 4) is normal or not . 
5 If the value is judged to be abnormal, and if the 
states of all the other items registered in the 
computer load information table 1280 are normal, then 
notification 12 is issued to the collection interval 
management program 1260 (1505) . 

10 The collection interval management program 

1260 receives the notification 12 (step 1100 in Fig. 
11), modifies the collection state of the item whose 
collection state 230 is "temporary stop" in the 
collection interval table 1220 (Fig. 2) to the "detail" 

15 (1101), and terminates the processing (1102). 

According to the present embodiment described through 
the notification 12 and the operation for this, for the 
item whose collection interval has been stopped to be 
reduced because the item of the computer load was 

20 abnormal, the reduction of the collection interval is 

resumed when the item of the computer load is recovered 
to the normal state, thereby enabling detail 
information collection . 

The first embodiment of the present invention 

25 has thus far been described. 

Description will now be directed to a second 
embodiment of the present invention. In the 
aforementioned embodiment, there is only one derivative 
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group performing detail collection at a certain time 
point. On the other hand, in the second embodiment, 
explanation will be given on a case when detail 
collection is performed simultaneously for two or more 
5 derivative groups. In this embodiment, for example, it 
is assumed that when a certain item ai is abnormal and 
the collection interval of the items belonging to the 
derivative group associated with the item ai is 
reduced, the value of an item ak other than the ai is 
10 abnormal. 

The present embodiment will be described with 
reference to Fig. 18, Fig. 19, and Fig. 20. Fig. 18 
and Fig. 19 are flowcharts showing the operation of the 
monitoring item acquisition program 1111 and the 

15 operation of the collection interval management program 
1260, respectively. Moreover, Fig. 20 is a detail 
collection time table 1230. This is used in the 
embodiment described below for judging the time during 
which each derivative group is detail-collected when 

20 derivative groups of a plurality of items have become 
abnormal and detail collection is performed alternate- 
ly. In the derivative group 2100, derivative group 
names 520 registered in the derivative group definition 
table 1240 (Fig. 5) are registered- The detail 

25 collection time 2200 contains a time which has elapsed 
up to now from the moment when the detail collection 
has been started if each item belonging to the 
derivative group is currently in the detail collection 
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state . 

In this embodiment, when an item has become 
abnormal, if a derivative group has already been in the 
detail collection state for a predetermined period of 
5 time, the derivative group of the new item which has 
become abnormal is detail-collected and the 
aforementioned derivative group already in the detail 
collection state is modified to the normal collection . 
Here, the reference to decide whether to modify the 

10 derivative group already in the detail collection state 
to the normal state is registered as a reference time 
2300. It should be noted that in the explanation of 
this embodiment, those portions different from the 
first embodiment will be explained in detail . 

15 In Fig. 18, if a collection interval decided 

for a certain item (ai) has elapsed from the moment 
when the value of ai was acquired previously (1800) , 
the value of the item ai is acquired (1801). In step 
1802, it is judged whether the acquired value is 

20 normal. If the value is normal, the programs operate 
in the same way as has been explained above. 

In step 1802, if the value of the acquired 
item is judged to be abnormal, control is passed to 
step 1804 where the collection state of the item ai is 

25 judged to be whether temporary stop or not by 

referencing the item information table 1210 (Fig. 2) . 
If the collection state is judged to be temporary stop 
state, the processing is terminated- If the collection 
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state is judged to be other than the temporary stop, 
the upper limit (u) of the number of new items which 
can currently be detail-collected is compared to the 
number of items belonging to the derivative group 
5 associated with the item ai so as to judge whether the 
number of items exceeds the upper limit u. Further- 
more, the computer load information table 1280 (Fig. 4) 
is referenced to judge whether any items associated 
with the computer load is in the "abnormal" state 

10 (1805) - Here, as the initial value of the value u, a 
user sets a value under which collection intervals of 
all the items to be monitored are initial values . 

After the monitoring is started, the value of 
initial value deleted by the number of items in the 

15 detail collection state at each time moment is 

registered as the u value at the moment. If the number 
of items belonging to the derivative group associated 
with the item ai does not exceed the u and the state of 
all the items associated with the computer load are all 

20 "normal", then in step 1806, notification 2 is issued 
to the collection interval management program 12 60. 
The notification 2 is to reduce the collection interval 
of the items belonging to the derivative group 
associated with the item ai , Operation {Fig. 8) of the 

25 collection interval management program 1260 and 
operation of the collection interval modification 
program 1112 which have received the notification 2 are 
identical to the operations explained in the first 
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embodiment . 

In step 1805, if the number of items 
belonging to the derivative group associated with the 
item ai exceeds the u or at least one of the items 
5 associated with the computer load is "abnormal", 

control is passed to step 1807 where notification 18 is 
issued to the collection interval management program. 
This means that the value of the item ai is abnormal 
but if the collection intervals of the items belonging 

10 to the derivative group associated with the item ai are 
reduced, there is a danger of further deteriorating the 
computer load which is currently abnormal. According- 
ly, the processing shown below will be performed. 

By referencing to Fig. 19, explanation will 

15 be given on the operation of the collection interval 
management program 1260 which has received the 
notification 18. In step 1901, the detail collection 
time table 1230 (Fig. 20) is referenced to extract the 
derivative group (Gl, G2, Gk) currently in the 

20 detail collection state. It should be noted that "a 
derivative group is in the detail collection state" 
means that each of the items belonging to the group is 
in the detail collection state (the same meaning is 
used in the other portion of this Detail Description). 

25 Next, in step 1902, for each of the extracted 

groups, it is judged whether the time which has elapsed 
after the group has entered the detail collection state 
(field 2200 of Fig. 20) is greater than the reference 



time (field 2300 of Fig. 20) predetermined for the 
group- In step 1902, if there is no group whose detail 
collection state time has elapsed more than the 
reference time, the processing is terminated. 

If there are any groups whose detail collec- 
tion state time has elapsed more than the reference 
time, one group (Gl) is extracted from the groups by an 
appropriate method (for example, the group whose detail 
collection state time has elapsed more than any other 
groups) . Next, in step 1903, notification 9 is issued 
to instruct modification of the collection interval for 
each of items belonging to the extracted groups to the 
initial values predetermined for the respective items. 
The operation of the collection interval modification 
program 1112 which has received the notification 9 is 
identical to the one explained in the aforementioned 
first embodiment - 

Furthermore, in step 1904, items belonging to 
the derivative group related the item ai which has 
shown abnormality are extracted by referencing the 
derivative group definition table 1240 (Fig. 5) - Next, 
in step 1905, notification 4 is issued to instruct 
reduction of the collection interval of each of the 
items extracted in step 1904. The operation (Fig. 12) 
of the collection interval modification program which 
has received the notification 4 is identical to the one 
explained in the first embodiment. As has been 
explained above, even if a plurality of items 
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simultaneously become abnormal, values of items 
belonging to the respective derivative groups 
associated with the respective items which have become 
abnormal can be collected in detail while suppressing 
5 the computer load. 

Description will now be directed to a third 
embodiment of the present invention. In this 
embodiment, for each of the items, the collection 
interval is varied for the item according to the value 

10 of the item. The method used below is as follows. 

When the absolute value of the variation ratio of the 
values currently acquired for the respective items and 
the values acquired previously is equal to or above a 
predetermined reference value, the collection interval 

15 of the item is reduced and when the variation ratio is 
smaller than the predetermined reference value, the 
collection interval is increased- However, the present 
invention is not limited to this method. It should be 
noted that explanation of the third embodiment will be 

20 given with reference to Fig. 2 to Fig. 17. 

Fig. 16 is a flowchart showing operation of 
the monitoring item acquisition program 1111 according 
to the third embodiment. In step 1600, it is judged 
whether the collection interval of an item (a2) has 

25 elapsed after the value of the item was acquired 

previously. If the time has elapsed, the value of the 
item a2 is acquired (1601) . Next, it is judged whether 
the value of the acquired item satisfies the condition 
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of "normality" predetermined for the item by 
referencing the normal state definition 310 in the item 
information table 1210 (Fig. 3) (1602). If the item 
value is judged to be "abnormal", then it is judged 
5 whether the collection state of the item a2 is "detail" 
by referencing the collection state 230 of the 
collection interval table 1220 (Fig. 2) (1604). 

If the collection state is other than the 
"detail", it is judged whether the collection state of 

10 the item a2 is "temporary stop" (1605) . If the 
collection state is judged to be other than the 
"temporary stop", the notification 1 is issued to the 
collection interval management program 1260 (1607) . 
The notification 1 is used to reduce the collection 

15 interval of the derivative group associated with the 
item a2 . The operation (Fig. 8) of the collection 
interval management program 12 60 which has received the 
notification 1 and the operation of the collection 
interval modification program 1112 which has received 

20 the notification of instruction of the collection 

interval management program are identical to the ones 
explained in the first embodiment. It should be noted 
that as a new collection interval candidate X in step 
1201 of Fig. 12/ a value not smaller than the "minimum 

25 value" determined in Fig. 2 for the items whose 

collection intervals are to be reduced is selected. 
Moreover, as Y in step 1301 of Fig. 13, a value not 
greater than the "maximum value" determined in Fig. 2 



for the items whose collection intervals are to be 
increased is selected. 

In step 1604 of Fig. 16, if the collection 
state is judged to be "detail", then notification 15 is 
issued to the collection interval modification program 
1112. 

Fig. 17 is a flowchart showing operation of 
the collection interval modification program 1112 which 
has received the notification 15. Upon reception of 
the notification 15 (1700), by referencing the collec- 
tion interval table 1220 (Fig. 2), the minimum value 
(MIN) and the maximum value (MAX) of the variation 
width of the collection interval are extracted for use 
when modifying the collection interval according to the 
absolute value of the variation ratio (1701) . That is, 
since the item a2 is in the detail collection state., 
the "minimum value" registered as MIN in the minimum 
value 250 is used and the "initial value" of the field 
220 is used as MAX. It should be noted that as will be 
detail later, when modifying the collection interval 
according to the variation ratio for the item whose 
collection state is in "degeneration", the "initial 
value" of the field 220 is used as MIN and the "maximum 
value" of the field 260 is used as MAX. 

Thus, in this embodiment, according to the 
collection state, the collection interval variation 
width MAX and MIN are changed. This can have the 
following effects. That is, in this embodiment, the 
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collection interval is varied according to the absolute 
value of the value variation ratio for each item. 
Accordingly, even if the item is in the detail state, 
i.e., the collection interval for it has been reduced 
5 from the initial value, the collection interval is 

increased if the absolute value of the value variation 
ratio is smaller than the variation reference value. 
On the other hand, for the item in the degeneration 
state, i.e., the collection interval has been increased 

10 greater than the initial value to suppress the computer 
load, the collection interval is reduced if the 
absolute value of the value variation ratio is greater 
than the variation reference value . 

Accordingly, there is a possibility that 

15 unless the upper limit value and the lower limit value 
of the variation width of the collection interval are 
changed according to the collection state, the 
collection interval is increased to an extent of the 
degeneration state even when the detail collection 

20 state is set in and detail information collection 

cannot be performed. Moreover, there is a possibility 
that even when the degeneration collection state is set 
in, the collection interval is reduced to an extend of 
the detail collection state and the computer load 

25 cannot be suppressed. 

To cope with this problem, in this invention, 
for one and the same item, the upper limit and the 
lower limit of the variation width of the collection 
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interval are changed according to the collection state. 
Accordingly, even when changing the collection interval 
according to the absolute value of the variation ratio 
of the item value, it is possible to suppress the 
5 computer load and reduce the collection interval of the 
item whose detail information is desired. 

Next, by using the previously acquired item 
value 330 of the item information table 1210 (Fig. 3), 
the absolute value of the variation ratio of the latest 

10 item value of the item a2 and the previously acquired 
item value (variation ratio of the latest value with 
respect to the previously acquired value) is calculated 
and the calculation result is stored as A (1702) . 
Next, the variation reference value of the collection 

15 interval table (field 240 in Fig. 2) is extracted (as 
P) and judgment is made whether A is smaller than P 
(1703) . 

If A is equal to or greater than P, the 
current collection interval registered in the field 210 

20 of the collection interval table 1220 (Fig. 2) is 

divided by 2 to obtain a value which is stored as X 
(17 04) - Next, judgement is made whether X is greater 
than MIN (1705) . If X is judged to be greater than 
MIN, X is registered as a new collection interval in 

25 the field 210 (1706). If X is judged to be equal to or 
smaller than MIN, the processing is terminated as it is 
(1707) . Thus, when the item value variation ratio is 
greater than a predetermined reference value, the 



collection interval is reduced in a value range greater 
than MIN. 

It should be noted that instead of the 
numeric 2 used in step 1704, it is possible to use 
other positive number. Moreover, in this embodiment, 
if X is judged to be greater than MIN in step 1705, the 
collection interval is modified to X (1705) . Instead 
of this, it is also possible to modify the collection 
interval to X if the X is judged to be equal to or 
greater than MIN. 

In step 1703, if the absolute value A of the 
variation ratio is smaller than the variation reference 
value P, the current collection interval is multiplied 
by 2 to obtain a value which is stored as Y (1708) . 
Judgement is made whether the Y is smaller than MAX 

(1709) . If the Y is judged to be smaller than MAX, the 

Y is registered as a new collection interval (1710) . 

If Y is equal to or greater than MAX, the processing is 
terminated as it is (1711) . 

Thus, when the absolute value of the 
variation ratio is smaller than the reference value, 
the collection interval is increased in a value range 
smaller than MAX. The numeric 2 used in step 1708 may 
be replaced by other positive number. Moreover, in 
this embodiment, the collection interval is modified to 

Y if Y is judged to be smaller than MAX in step 1709 

(1710) . However, it is also possible to modify the 
collection interval to Y if Y is judged to be equal to 



or smaller than MAX. Moreover, in this embodiment, if 
A is smaller than P in step 1703, control is passed to 
step 1708 and if A is equal to or greater than P, 
control is passed to step 1704. However, it is also 
possible to pass control to step 1708 if A is equal to 
or smaller than P and to step 1704 if A is greater than 
P. 

In step 1602 of Fig. 16, if the value of the 
acquired item is "normal", the collection interval 
table 1220 (Fig. 2) is referenced and judgment is made 
whether the collection state of the item a2 is "detail" 
(1603) . If the collection state is judged to be 
"detail", the abnormal item table 1250 (Fig. 6) is 
referenced to judge whether the item a2 has derivation 
(1609) . If no derivation is present (as an abnormal 
item of the item a2 , no item other than the item a2 
itself is registered) , notification 16 is issued to the 
collection interval management program 12 60 (1611) . 
This means that the item a2 is in the normal state and 
has no derivation. Accordingly, the collection 
interval of the derivative group associated with the 
item a2 is recovered to the initial value. The 
operation of the collection interval management program 
1260 which has received the notification 16 is 
identical to the one shown in Fig. 9 referenced in the 
explanation of the first embodiment. The operation of 
the collection interval modification program 1112 
performed in response to the notification of 
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instruction of the collection interval management 
program is also identical to the one shown in Fig. 15 
referenced in explanation of the first embodiment. 

In step 1609, if it is judged that derivation 
5 is present, notification 17 is issued to the collection 
interval modification program 1112 (1610) . The 
operation of the collection interval modification 
program 1112 which has received the notification 17 is 
identical to the case upon reception of notification 15 

10 explained with reference to Fig. 17. 

In step 1603, if the collection state of the 
item a2 is judged other than the "detail", the 
collection interval table 1220 (Fig. 2) is referenced 
to judge whether the collection state of a2 is 

15 "temporary stop" (1608) . If the collection state is 
the "temporary stop", judgement is made whether 
derivation is present (1612) . If no derivation is 
present, notification 16 is issued to the collection 
interval management program 1260 (1611) . This is for 

20 recovering the collection interval of the derivative 

group associated with the item a2 to the initial value. 
The collection interval management program 1260 and the 
collection interval modification program 1112 which 
have received the notification 16 operate as has been 

25 explained above. 

In step 1608, if the collection state is 
judged to be other than the temporary stop, judgment is 
made whether the collection state is "degeneration" 
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(1613) . If the collection state is judged to be 
"degeneration"^ notification 17 is issued to the 
collection interval modification program 1112. The 
collection interval modification program 1112 which has 
5 received the notification 17 operates in the same way 
as has been explained above (1614). However^ since the 
collection state is currently "degeneration", the 
values used as the maximum value MAX and the minimum 
value MIN of the variation width of the collection 

10 interval are the values registered in the maximum value 
260 and the initial value 220 of Fig. 2 as has been 
explained above. 

In this embodiment also, the computer load 
monitoring program is used to monitor the items 

15 associated with the computer load. If any item value 

is abnormal, the item of the detail collection state is 
modified to the temporary stop while the collection 
interval of the item in the degeneration state or 
normal state can be increased. In this case, the 

20 computer load monitoring program operates in the same 
way as has been explained with reference to Fig. 15 in 
the first embodiment. The collection interval 
management program operates in the same way as has been 
explained with reference to Fig. 10 and Fig, 11 in the 

25 first embodiment. The collection interval modification 
program operates in the same way as has been explained 
with reference to Fig. 13 in the first embodiment. 
However, as the Y in step 1301 of Fig. 13, it is 
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necessary to select a value not greater than the 
"maximum value" predetermined in Fig. 2 for the item 
whose collection item is to be increased- 

As has been described above, according to the 
5 present invention, it is possible to collect detail 
information on the execution state of the program 
executed on a computer while suppressing the computer 
load. 

It should be further understood by those 
10 skilled in the art that although the foregoing 
description has been made on embodiments of the 
invention, the invention is not limited thereto and 
various changes and modifications may be made without 
departing from the spirit of the invention and the 
15 scope of the appended claims . 



